Remove support for plaintext auth in agent API

[schorschii]

After a transition time, the agent API should only allow authentication using the new HCMAC signature method.